Security Audit Python Packages

pip-audit

Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

pysentry-rs

🐍 Scan your Python dependencies for known security vulnerabilities with Rust-powered scanner

dependency-check

:closed_lock_with_key: Shim to easily install OWASP dependency-check-cli into Python projects

whispers

Identify hardcoded secrets in static structured text (version 2)

owasp-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

prowler-cloud

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

ds-analysis-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-xbom-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ds-reporting-lib

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

pyscan-rs

python dependency vulnerability scanner, written in Rust.

urllib3-lts

Long-Term Support (LTS) security fork of urllib3 with backported CVE fixes for Python 3.7 and 3.8.

hexora

Static analysis of malicious Python code

secator

secator - the pentester's swiss knife

fritap

Simplifies (SSL/TLS) traffic analysis and key extraction using Frida across major platforms.

appthreat-depscan

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

ssh-mitm

SSH-MITM - ssh audits made simple

citellus

Automation Troubleshooting Framework to validate and report configuration, software installed, etc with bash, python, and your language of choice.

zapcli

A simple tool for interacting with OWASP ZAP from the commandline.

tgcore

TgCore • Designed for complex systems. Made simple. A fluent DSL for building Telegram bots, APIs, and AI workflows.

resotolib

Fix Inventory helps you identify and remove the most critical risks in AWS, GCP, Azure and Kubernetes.

urllib3-lts-py38

Long-Term Support (LTS) security fork of urllib3 with backported CVE fixes for Python 3.7 and 3.8.

faradaysec

Open Source Collaborative Penetration Test and Vulnerability Management Platform https://www.faradaysec.com

urllib3-lts-py37

Long-Term Support (LTS) security fork of urllib3 with backported CVE fixes for Python 3.7 and 3.8.